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Abstract. Let ^ be a prime, and ^ a curve of genus 2 over afield k of characteristic not 
2oi(. If S is a maximal Weil-isotropic subgroup of ^^^[^],then ^^r^/S is isomorphic to 
the Jacobian ^oj- of some (possibly reducible) curve We investigate the Dolgachev- 
Lehavi method for constructing the curve 3t^, simplifying their approach and making 
it more explicit. The result, at least for ^ = 3, is an efficient and easily programmable 
algorithm suitable for number-theoretic calculations. 



1. Introduction 

Let ^ > 3 be prime, and let J^hea curve of genus 2 over a perfect field k of character- 
istic not 2 or £. Let be the Jacobian of and let S be a maximal ^-Weil isotropic 
subgroup of ^hW', since £ is prime, S = (Z/^Z)^. The quotient ^^IS is isomorphic 
(as a principally polarized abelian variety) to a Jacobian ^^a-, vi^here 3^ is some curve of 
genus 2 (see [14]); hence, there exists an isogeny 

with kernel S (note that 9C may be reducible, in which case ^gc is a product of elliptic 
curves). Our aim is to compute an explicit form for 9C given J€ and S. 

In the case I -2, the problem is resolved by the well-known Richelot construction 
(see [3] and [5, Chapter 9]). More generally, if k is finite, then we can apply the explicit 
theta function-based algorithms of Lubicz and Robert [10], implemented in the freely- 
available avisogenies package [1]. 

Alternatively, there is the algebraic-geometric approach described by Dolgachev and 
Lehavi [7] , which computes the image of the theta divisor on in the Kummer surface 
of ^x- As presented in [7], this approach has two drawbacks: 

(1) it is not effective for £ i^?>, and 

(2) for £ - ?>, where theta structures are involved, it assumes k c C. 

In this work we render the kernel of the Dolgachev-Lehavi method completely ex- 
plicit, with a view to computations in number theory. Our intention is to provide a sort 
of "user's guide" to the algorithm and its concrete implementation. For £ -?> we obtain 
a simple, efficient, and easily- programmable algorithm (that does not require k c C). 
Our algorithm retains the pleasing geometric flavour of the original, but is better-suited 
to everyday calculations. 

2. An overview of the Dolgachev-Lehavi construction 

We begin by briefly recalling the Dolgachev-Lehavi construction, before treating it in 
detail in the following sections. Suppose ^/k, S, (/), and X are as above; we assume we 
are given an explicit form for J€ and S, and we want to compute an explicit form for %. 
Dolgachev and Lehavi observe that if 0jr and ©a; are theta divisors on and ^gc< 
respectively, then (/)(0 je) is in |/'0a;| (see [7, Proposition 2.4]); and as such, the image of 
<p{&^) in the Kummer surface JT^; - ^a;/ <+l> is a degree-2^ rational curve^ in of 
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arithmetic genus {(^ -1)12 and with {(^ -1)12 ordinary double points corresponding to 
the nonzero elements of S, up to sign [7, Proposition 3.1]. We can compute this curve 
without knowing ^ by expressing the map O : ^ = 0^ c c as the 

composition of a double cover p2( of a rational normal curve in P^^ with a projection 
n : P^^ — P^ whose centre depends on certain secants corresponding to the nonzero 
elements of S, up to sign. The images under O of the Weierstrass points of ^ lie on a 
conic i2 contained in a hyperplane of P^; that is, a trope of The double cover oi^ 
ramified over the Weierstrass point images is then (a quadratic twist of) 3^. 

3. The DOMAIN CURVE 

We suppose that ^/k is presented as a nonsingular projective model 

6 

(1) J€:Y'^^ F{X,Z) = ^ FjX'z^-' c P(l,3, 1), 

where F is a squarefree homogeneous sextic over k (such a model always exists when k 
is perfect and has characteristic not 2: see [5, §1.3]). The hyperelliptic involution of is 

ije:{X:Y:Z)^iX:-Y:Z). 

The divisor at infinity on ^ is 

Doo = (l: v^:0) + (l:-/Fb:0); 

we observe that D^o is defined over k, fixed by i ^, and equal to 2(1 : : 0) if Fe = 0. 

The six Weierstrass points of JC are the fixed points of ( they correspond to the 
projective roots of the sextic F. The Weierstrass divisor Wje of JC is the effective divisor 
cut out by F = 0; if F(X, Z) = n •=! i^iX - x/Z) over k, then 

= (xi : : zi) + ■ ■ ■ + (X6 : : ze). 
Note that is defined over k. Finally, we fix a canonical divisor on J€, defining 

K^--W^-2D^. 

4. The kernel of the isogeny 

When defining their method for ^ = 3, Dolgachev and Lehavi state "unfortunately, we 
do not know how to input explicitly the pair [.X, S) . Instead we consider ^ with an odd 
theta structure." We will take a rather more middlebrow approach to the problem: we 
suppose that is presented in the form (1), and that S is given as a collection of divisor 
classes on ^ expressed using an extended Mumford representation (detailed below). 

Our motivation for this choice is simple: this is precisely how one computes with 
hyperelliptic Jacobians in computational algebra systems such as Magma [11, 2] and 
Sage [13]. This choice also radically simplifies the algorithm: we can omit the theta 
structure calculations and pass directly to the secant computations (short-circuiting the 
first four steps of the algorithm in [7, §5.1]). 

Points on correspond to divisor classes of degree zero on The Riemann- 
Roch theorem tells us that every nontrivial degree-0 class has a unique representative in 
the form P+Q- Dqo (this representation fails to be unique for the trivial class, because 
[P + ijf(P] - Doo] = for every P in ^(k)). 

Let e be a point of corresponding to a divisor class [P + Q- D^] . The effec- 
tive divisor P -i- Q is cut out by an ideal in the form {A{X, Z), Y - B{X, Z)), where B is a 
homogeneous cubic and A a homogeneous polynomial of degree d<2. The triple 

{a{x)Mx),d) := {A{x,l),B{x,l),d) 

then encodes the point e (with the convention that A is chosen such that a is monic). 
Note that if k' is an extension of k, then e = {a, b, d) is in ^je^k') if and only if a and b 
have coefficients in k'. 
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Conversely, given a triple {a,b,d}, we recover the corresponding point of by 
computing the effective divisor cut out by [A{X,Z],Y-B (X, Z) ) , where B is the degree-3 
homogenization of b and A is the degree- d homogenization of a, and then subtracting 
(d/2)Doo. If has two points at infinity (that is, if Fe ^ 0) then d must be either 2 or 0. 
In the case where ^ has a single point at infinity (that is, when Fg = 0) we always have 
d - degfl, and the pair (a, b mod a) is the standard Mumford representation. The ad- 
vantage of the extended representation above is that it gracefully handles the general 
case where there are two points at infinity. 

Example 4.1. Consider the following points on the Jacobian ofJ!^:Y^ = X^-Z^. 

• is represented by < 1 , 0, 0> . 

• [(1 : : 1) + (-1 : : 1) -L>oo] is represented by {x^ - 1,0,2). 

. [(1 : 1 : 0) - (1 : -1 : 0)] = [2(1 : 1 : 0) - Doo] is represented by (l,x^2>. 

In this article, we will assume that the points of S are all k-rational. This simplifies 

the exposition and the computations; however, all of our calculations are symmetric in 
the elements of S. The algorithm should therefore be easily adapted to the case where S 
is rational but its elements are not. 

5. The rational normal curve 
The Riemann-Roch space L{2£Kj^) is a direct simi of subspaces 

where t ^ acts as + 1 on the elements of L(2£Kj^) and - 1 on the elements of Li2£Kjic) ~ . 
Writing x = X/Z and y = Y/Z^, we have 

U2£Kje)* = {x'l/^)%„ and U2£Kj^)- = {x'ly^^-%-\ 

The space L{2£K_^)''' corresponds to the linear system \2£ K^]^^-^"^ ; we see immedi- 
ately that it is {2£ + 1) -dimensional, and therefore defines a map 

onto a curve B^ze in P^^- Fixing coordinates on P^^, we take pze to be defined by 
P2e:(.X:Y:Z)^(,Uo:---: U2e) = (.X°Z^^ : XZ^^'^ X^^'^Z: X^^). 
We see that 3^2£ is a rational normal curve of degree 2£ in P^^, and p2£ is a double cover: 
(2) p2e(.P) = PieiQ) [P = Q or P = i^(Q)). 

(Essentially, p2e is a composition of the canonical map of J!C and an ^-uple embedding.) 

6. The secant lines 

We adopt the following convention: if S is a set of points in some projective space P", 

then <S> denotes the linear subspace of P" generated by S. 

For any pair of points P and Q on we define ^p,q to be the line in intersecting 
Sl2e in P2e(.P) + pieiQ); that is, 

^ {P2eiP),P2eiQ)) if Pt{Q,iMQ)} 

^'^ 1 7p2^(P)(^2/) otherwise. 

We can also define secant lines corresponding to nonzero Jacobian elements: if e is a 
nonzero point on ^j^, then we define 

^e-=-^p,Q where c = [P + Q-Doo]. 
Observe that SSp,q = ^p,ij^{Q) = ^ij^{P),q = ^ije{P),ijeV}) for all P and Q on J6', so 

for all e in \ {0}. 
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Remark 6.1. Dolgachev and Lehavi define secants Ig = (p2/(f*i), P2/(^*2)) for eacli non- 
trivial point e=[Pi- P2] in (see [7, Theorem 1.1]). Our is equal to le, because 
[Pi - P2] = [Pi + 1MP2) - Doo] and ^Pi,P2 = ^PuMP2) . 

The following lemma gives explicit and rational formulae for the secants .Sfg and their 
intersections with arbitrary hyperplanes in P^. These formulae are central to the explicit 
Dolgachev-Lehavi method. 

Lemma 6.2. Lete = {a,b,d} be a nonzero point of LetHi'^figHiUi = beahyper- 
plane in P^^ , and write h{x) :- Lffg HixK 

(1) If a - 1 and d-2, then 

^e = ((0:---:0:l:0),(0:---:0:0:l)). 

(a) IfHze = H2e-i = 0, then ££e ^ H. 

(b) Otherwise, ife n i/ = (0 : ■ ■ ■ : : //a^ : --Ha^-i)- 

(2) IfaU) = x-a, then 

(a) Ifhia) = and H2( = 0, then H. 

(b) Otherwise, ^er\H= [H2e : //z^a : ■ ■ ■ : H2ea^^-^ : //z^a^^ - Ha)) . 

(3) IfaU) = x^ + aix + oq with a\ ^ 4ao, then 

= {{Tto ■ ■■■ :n2t),{-a\ : a2no : aa^ri : ••• : «2?r2/-i)) 

wherejiQ - 2,ni - -ai, andni - -a\ni-i — a27ii-2fori > 1. 

(a) Ifa{x] divides h{x), then 5£e c H. 

(b) Otherwise, if^ n J/ = (70 : ■ ■ ■ : J id where 

ri= L Iij{a{(Ti-j-a'2(Jj-i) 

o<j<2e 

with a k -Qfork< I, oi = 1, andok - -aia^-i - a2(Tk-2fork> 1. 

(4) Ifaix) = x^ + aix+ oo with al = 4ao, then writing a for -a\l2, we have 

= ((1 : a : ■ ■ ■ : a^^), (0 : 1 : 2ci: : ■ ■ ■ : 21 a^^''^)). 

(a) Ifa{x) divides h{x), then 5£e <= H. 

(b) Otherwise, <^ H - ijo T2e) whereji-ia^~^h{a)-a'h'(,a). 
Proof. In general, given points a - (ao : • • • : a2^) and p- {po:---: P2e) in P^^- we have 

H n ^a,fi = {APq - Bao : • • • : ^^21 - Ba2e) 

where A = HiCCi and B = L^^g ff,;6/; if A = B = 0, then ^a,fi ^ H (and the point 
above is not defined). In the following, we suppose e=[P + Q- DooV, we have e ^ 0, so 
we can suppose P ^ ije{Q). 

In case (1) both P and Q are at infinity, so P2e(.P) = P2/(Q) = (0 : • • • : : 1); our ex- 
pression for ife gives generators for the tangent to B^2£ at (0 : ■ ■ ■ : : 1). The intersection 
formula follows immediately. 

In case (2), we have P = (1 : : 0) and Q = (a : i/FToTT) : D, so p2/(^') = (0 : • • • : : 1) 
and P2^(Q) = (1 : a : • ■ • : a^^). The intersection formula follows immediately. 

In case (3), we have P = (a : +y'F{a,l) : 1) and Q = (j0 : +v^F(/3, 1) : 1) with a ^ p, 
a + p = -ai, and aj6 - 02; so P2/(P) = (1 : a : ••• : a^^) and P2/(Q) = (1 : /5 : ••■ : /J^^). If we 
take 

T={2:a + l5:---:a^^ + P^^) and S = (a -H |6 : 2|6q: : ■■ ■ : a/S^^ -H jBa^^), 
then we easily verify that ^p,q - ^t,s> it is a straightforward exercise with symmetric 
polynomials to show that a' + P' = ni for Q<i<2i and a)S' -1- j6a' = a27rj-i for / > 0, 
whence our formula for if^- The intersection // n if^ is 

Hn^P,Q = (;z(a) - ^(j8) : h{a)p-h{p)a Ha)0^^ - Hp)a^^y, 
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it is another straightforward exercise to show that 

so h[a)P'-h{P)a' = Y.J=QHj{p-a){a{oi-j-a^Gj-i) = {fi-a)ji forO < i < 2£, and thus 

In case (4), we have P = Q=ia: +\/F(.a,l) : 1); our expression for ££e gives generators 
for the tangent to ^ze at pze (P) = (1 : a : ■ ■ ■ : a^^). The intersection formula follows. □ 

7. The Weierstrass subspace 

Since 3^2£ is a rational normal curve of degree 2£, any 2£ + l distinct points on 3^2£ 
are linearly independent. In particular, the images of the six Weierstrass points of Ji? 
under pze are linearly independent because ^ > 3. In view of (2) the images are distinct, 
so the subspace 

is five-dimensional. 

For each 0< i <2£ -6, we define a linear form 

6 

Wr.= ZPjUi+J- 

Lemma 7.1. The space W is 

2e-6 

W= n V(Wi) = VaWi:0<i<2£-6}). 

i=0 

Proof. Each hyperplane contains W, since o = X'Z^^~^~'FiX,Z]. But 

the Wi are linearly independent, so the intersection flffo^ V{Wi) is 5 -dimensional, and 
hence equal to W. □ 

8. The theorem of Dolgachevand Lehavi 
We are now ready to state the main theorem behind the Dolgachev-Lehavi method. 

Theorem 8.1 ([7, Theorem 1.1]). There exists a unique hyperplane H(zP^^ such that 

(1) H contains W, and 

(2) the intersection points ofH with the secants 5£e for each nonzero e in S are con- 
tained in a subspace N ofcodimension 3 in H. 

The image of the Weierstrass divisor under the projection P^^ u/ith centre N lies on 
a conic ^ (which may be reducible), and the double cover ofS, ramified over this divisor 
is a stable curve 3C of arithmetic genus 2 such that^sc = ^^/S. 

It is crucial to note that Theorem 8.1 is not constructive: it does not in itself yield the 
hyperplane H, nor the centre N of the projection to P^. It is noted in [7, §3.4] that H is 
defined by (p* {®sc)> but in our situation we do not yet have an expression for ^ or @gc- 

In the case / = 3, we are saved by a happy coincidence: 2/ - 1 = 5, so H = IV (we 
return to this case in §11 below). For £ > 2>, we must compute H in some other way; 
Lemma 8.2, an easy corollary of Lemma 7.1, characterizes the possible hyperplanes. 

Lemma 8.2. The linear system of all hyperplanes in P^^ containing W is generated by the 
2£-5 hyperplanes V{Wi) forO <i<2£-6. That is, ifH ::>W isa hyperplane in P^^, then 

H = ^(ao Wo + ■ ■ ■ + a2£-6W2£-6) 

for some (ao : ■ ■ ■ : «2^-6) in P^^~®(lk). 
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In view of Lemma 8.2, one naive approach to computing ff for f > 3 would be to take 
a generic H = V['£%o^ ciiWi) and compute its intersection with the secants .Sfg. This 
yields -1)12 points whose coordinates are linear expressions in the a,-. We could 
then solve for the values of a; by computing the zero locus of the (2^-2) x (2^-2) minors 
of the matrix formed by the intersections Hr\^e> but each minor is still a degree- (2^-2) 
polynomial in 2^ - 5 variables, and the number of minors is exponential in £. 

Alternatively, we could take a generic set of linear equations determining N inside the 
generic H; requiring that this centre intersects any one of the - 1) 12 secants imposes 
0(/*) quartic polynomial conditions on the 0{£) unknowns. 

In each approach the system is highly overdetermined, and with a clever choice of 
minors we might hope to get lucky and find solutions for toy examples. However, both 
approaches already represent a significant undertaking for £ = 5, even over finite fields; 
they are totally impractical for larger £ and for infinite fields. 

We continue the treatment for general ^ in §9 and § 1 0, supposing that an equation for 
H has been found; without such an equation, the avisogenies package [1] represents 
a much more sensible approach for ^ > 5 (if k is finite). For £ = 3, the Dolgachev-Lehavi 
method is as practical as it is interesting; we specialize to this case in §11 and §12. 



9. From theory to practice 



To compute via Theorem 8.1, we must compute the map 
where n : P^^ — is the projection with centre AT. Suppose that we have an equation 



i 



for H. We can then apply Lemma 6.2 to compute the centre N - nH:e£S\ {0}>. 
Since iVc we may compute vq.o ^0,2^, vi_o, . . . , vi,2/, V2,o, ■ ■ ■ , ^2,2/ in k such that 



2e le le le-e, 

Y.vo^Ui, J^vijUi, Y.V2,iUu I 

i=0 i=0 i=0 i=0 



(This amounts to computing the kernel of the matrix whose rows are formed by the 
coordinates of the .Sfg n H; the choice of JL^^q for the fourth defining equation will 
be convenient later in the procedure.) 

Fixing coordinates on P^, the projection 71 with centre N is defined by 

;=0 ;=0 ;=0 ;=0 / 

the composed map 3> = tt o is then 

O : (X : F : Z) ^ (Vb : V^i : V2 : V3) = («>o(^. Z) : (X, Z) : (^2iX, Z) : OsiX, Z)), 
where 

2£ 2( 2( 

i=0 i=0 i=0 

and 

2^-6 

3)3:= aiX'Z^^-^-'F{X,Z). 



i=0 



The image of <I> is a rational curve of degree 2£ in P^. It lies on the Kummer sur- 
face of the unknown codomain Jacobian ^ar> and is therefore the intersection of a 
quadric and a cubic hypersurface in P^ (see [9, Chapter XIII]): 

«>(P^)=Jn<^ where J = V^(Q(Vb, ^1,^2, V3)) and <^ = V^(C(Vb.V\, 1^2,^3)) 
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for some forms Q and C of degree 2 and 3, respectively. The forms Q and C generate the 
elimination ideal 



note that Q is uniquely determined, and C is determined modulo (VqQ, ViQ, V2Q, V3Q). 

The Weierstrass points of map into the hyperplane V3 - 0, which we identify 
with P^. (This simplification motivates our choice of Oa.) Theorem 8.1 asserts that a 
conic ^ passes through the six images, and indeed 

^ = V{Q[Vo,Vi,V2))cP^, where Q(Vb, Vi, V2) = Q(Vb, Vi,V^2,0). 

The image of the Weierstrass divisor under <1> is therefore .S n where 



We are more interested in the forms Q and C than in Q and C, and it is a simple matter to 
interpolate them. For Q, we compute the six quintic polynomials O; (x, 1) mod F(_x, 1) 
for < / < j < 2; the unique linear relation between them (and between the ViflVjfl if 
^6 = 0) yields the coefficients of Q. Similarly, to find C we compute the ten quintics 
<I),Oj3)fc(jt;, 1) mod F(x, 1) for < i < ; < < 2; any one of the linear relations between 
them (and the v,- oVj;,o if ^6 = 0) gives an equation for a valid cubic C. 



The data [^,^n'^) specifies a genus 2 curve 3^ (up to a quadratic twist) as a double 
cover of ^ ramified over the six points of n S^. This is the output of the Dolgachev- 
Lehavi algorithm and of Theorem 8.1, and it is sufficient for computing isomorphism 
invariants ofX (see, for example, [4] and [12]). 

In some situations, however, we would like to derive a defining equation for itself. 
When ^ is nonsingular, we recover a hyperelliptic curve; in the degenerate case where 
^ is singular, we recover a union of two elliptic curves and which are generally 
defined over a quadratic extension of k (in which case they are Galois conjugates). The 
procedure is essentially standard (cf. [4, §2]), but we recall it here for completeness. 

Algorithm 10.1. Computes a (possibly reducible) genus 2 curve representing a double 
cover of a given plane conic ramified over the intersection with a plane cubic. 

Input: A plane conic ^ : Q( Vq, ^1 , 1^2) = and cubic ^ : C( Vq, V^i , V2) = 0. 

Output: A genus 2 curve forming a double cover of i2 ramified over i2 n If 
^ is singular, then vnll be a one-point union of elliptic curves 3^+ and 
with SC+ ramified over Pq and <^ n ^+ where ^ = ^+ + ££- and Po = ^+n££-. 

1: Let M be the matrix defined by 



2: If det(M) = 0, then B is singular. 

2a: Compute a diagonal matrix D = diag(a, b,0) and an invertible matrix T 

such that M= TP . 
2b: Set 6 = V-a/b, and define homogeneous cubics C+ [X, Z) and C_ (X, Z) 

by C± := C((?oo ± «5?oi)-^ + feX, (fio ± <5fii)Z + fizX, (fzo ± «5f2i)2 + t22X) 



[Q, C) = (Vb - 3>o, t^i - ^i,V2 - ®2, - O3) nk[Vo, Vi, V2, V3]; 



'^^ViC{Vo,Vi,V2])cP^ with C(Vb,Vi,y2) = C(yo,Vi,V2,0). 



10. The CODOMAIN CURVE 



' 2qo,o ^0,1 ^7o,2 
M:= qo,i 2^1,1 ^71,2 , where ^ <7;jV^(Vy = Q(yo, 1/1,^2). 

, ^70,2 <7l,2 2(72,2 j 0<!<7<2 



where 




= T. 
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2c: Define elliptic curves 3C+ and 3C- over k(5) in P (2, 3, 2) by 

SC+:Y'^ = C+[X,Z) and ^_ : = C_(X,Z), 

and return the union of 3C+ and 3C- identifying the points at infinity. 
3: Otherwise, .S is nonsingular. 

3a: Compute a rational point P - (ao : «i : ocz) in ,S(lk) (see Remark 10.2). 
3b: Let tt : ^ i2 be the corresponding parametrization, defined by 

n:[X:Z)^[Vo:Vi: Vz) = {Pq{X, Z) : Pi (X, Z) : PziX, Z)) 

(the Pi are quadratic forms). 
3c: Return 5^" : = CiPoiX,Z),PiiX,Z),P2iX,Z)). 

Remark 10.2. Step 3a of Algorithm 10.1 requires us to compute a k-rational point P on 

the conic ^. If ^ has a rational Weierstrass point Wq, then we may take P - ^(Wb). 
Generically, however, ^ has no rational Weierstrass points, and then we are obliged to 
search for a rational point on .S. We are guaranteed that such a rational point exists 
(cf. [12, Lemme 1]). Over a finite field, finding a rational point is straightforward; over 
the rationals, we can apply (for example) the Cremona-Rusin algorithm [6]. 

11. The ALGORITHM FOR ^ = 3 

Consider now the special case £ = 3. The map peiJif — S^e'^P'^ is defined by 

P6:(.X:Y:Z)^{Uo:Ui:---:U5:Ue) = {Z^:XZ^:---:X^Z:X^). 

The hyperplane H of Theorem 8.1 contains W - (peiW^)) by definition; but dimH = 
dim W = 5, so H = W. Applying Lemma 7.1, we find 

I 6 \ 

(3) H=V{Wo) = V\Y,FiUi cp6; 

this allows us to simplify Lemma 6.2 for the case £ = 3. 
Proposition 11.1. Ife- {a,b,d) is a nonzero 3-torsion point of ^^e, then 

//n.Sfe = (70(e) :---:r6(e)), 

where the ji are defined as follows: 

(1) If a ' 1, thenjiie) = OforO <i<5, withy^ie) = Fq andy^i^e) = -F5. 

(2) If a is linear, thenyi(e) = OforO < / < 6, andy^ie) = 1. 

(3) Ifaix) - + aix+ oo with af ^ 4ao, then 

6 

7/(e) = ^ Fjia'^ai-j + ai^aj-i) for0<i<6 

;=o 

withofc - Ofork< 1, a\ - 1, anda^ - -aiOk-i - a2(Tk-2fork> 1. 

(4) IfaU) = x^ + aix + ao with af = 4ao, then 

6 

yiie) = X - i)Fj{-ail2Y^i-^ for 0<i<6. 

Proof This follows immediately from Lemma 6.2 on setting H - ^(Z^^g Ff Ui) and not- 
ing that a(x) carmot divide Hx) = 'L^i^q Fix' (since otherwise e would have order 2). □ 

We now present a version of the Dolgachev-Lehavi algorithm for ^ = 3 based on the 
extended Mumford representation. The algorithm requires only elementary matrix al- 
gebra and polynomial arithmetic, and should be easily implemented in most computa- 
tional algebra systems. 
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Algorithm 11.2. A streamlined Dolgachev-Lehavi- style algorithm for / = 3. 

Input: A genus 2 curve J€ -.Y"^ = FiX, Z) = Z%o FiX'z^~^ over k and a maximal 
Weil-isotropic subgroup S of its elements defined over k and presented 

as in §4. 

Output: A genus 2 curve S^/k such that there exists an isogeny (p : -* </ar with 

kernel S (the curve X is computed up to a quadratic twist, so the isogeny may 

only be defined over a quadratic extension of k). 
1: Compute a minimal subset S* of S such that S = {e : e e S*} u {-e : e e S-} u {0} 

(then {!£(, : e e S-} - :ee S \ {0}}; this avoids redundancy in Steps 2 and 3). 
2: For each e in S- , compute the vector Vg - ijoie),..., ye (e)) using the formulae in 

Proposition 11.1. 

3: Compute vectors ni - {Vifl,---,Vifi) such that {na,ni,n2,{Fj : < y < 6)} is a 
basis for the (left) kernel of the 7x4 matrix (f* : e e S-). Set 

6 

® / = L for < / < 2. 

7=0 

4: For each < i < 7 < 2, compute the vector ri^j of length 6 whose rfi^ entry is the 
coefficient of x"~'^ in 1) mod F{x, 1). If F^ = 0, then take the entry 

of r,-,y to be VifiVjfl-. this allows us to correctly interpolate through the image of 
the Weierstrass point at infinity. 

5: Compute a generator {qi^j : < i < 7 < 2) for the (left) kernel of the 6x6 matrix 
whose rows are the r, ,y for < i < 7 < 2. Set 

Q(Vb, Vi, V2) := qofiV^ + qo.iVoVi + ^o,2VbV^2 + ^1,1^1^ + '7i,2V\V^2 + fe^f • 

6: For each < i < 7 < fc < 2, compute the vector j jt of length 6 whose entry 
is the coefficient of x""^ in (<^i<^j<^k){x, 1) mod F{x, 1). If Fe - 0, then take the 
6* entry of s^j^k to be v;,oVy,oVfc,o. 

7: Compute any nontrivial element {Cij^ :0< i < 7 < fc < 2) of the (left) kernel of 
the 10x6 matrix whose rows are the Sij^^ for < / < 7 < fc < 2, and set 

C{Vo,Vi,V2]:= X Cij,kViVjVk. 

0<i<j<k<2 

8: Return the result 3^ of Algorithm 10.1 applied to ^ = ViQ) and ^ = V{C]. 

12. The algorithm in practice 

We conclude with an example for ( = 3. To avoid a visually overwhelming mass of 
coefficients, we will work over a small finite field; the curve was chosen at random. 
Consider the genus 2 curve over Fggy defined by 

^ : = X*^ + 113X^ Z + + 363X^ + 64X^ Z'^ + 503XZ^ + 630Z'' . 

Computing the zeta function of (using Magma), we see that its Weil polynomial is 

P[T) = - 31 + 547^- 30907 r + 994009, 

so is absolutely simple by the Howe-Zhu criterion [8, Theorem 6]. The elements 
Di = (x^ + 392JC + 208, 579X + 603,2) and D2 = {x^ +48x+ 527, 918x + 832,2) of ^^have 
order 3, and S - {Di.Dz) is a maximal 3-Weil isotropic subgroup of ^^[3]. Applying 
Algorithm 11.2, we may take 

+ _ f<x2-i-392x + 208,579x + 603,2),(x2-l-48x + 527,918x + 832,2), 1 
~ I (x^ + 428x + 880, 252x + 901, 2), (x^ + 348x + 292, 596x + 269, 2) J 

in Step 1. Equation (3) shows that the hyperplane /7 c is defined by 

H : 630[/o + 503[/i + 64U2 + 363[73 + 99[74 + 113[/5 + Ue = 0, 
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SO the matrix in Step 3 is 



' 234 


319 


906 


896 ' 


780 


16 


29 


754 


500 


565 


703 


398 


680 


329 


823 


248 


324 


68 


779 


868 


742 


416 


468 


392 


^ 664 


395 


698 


952 ^ 



computing kernel vectors, we take 

00 = 121X6 + 742X^2 + 549X*Z2 + XZ^, 

01 = 285X'^ + 642X^Z + 332X^Z2 + X2z^ 
$2 = SSgX*^ + 701X^Z + ASAX'^Z^ + X^Z^. 

The quadratic form of Step 5 is then 

Q[Vo, Vi, V2) = Vq + 52Vbyi + 361lf + 5481^1^2 + 715^1 V2 + 296lf , 

and we may take the cubic form in Step 7 to be 

C[Vo, Vi, V2) = Vq + 167 Vf + 149 Vo Vi V2 + 836Vf V2 + 885 Vq v| + 538^1 + 294 V2^. 

We now apply Algorithm 10.1 to ^ : Q(Vo, Vi, V2) = and : CiVo.Vi.Vz) = 0. The 
conic ^ is nonsingular, and J!f has a rational Weierstrass point (-76 : : 1) mapping 
to the point (-36 : -80 : 1) on ^. The associated parametrization — ^ is defined by 

(X : Z) (36X^ + 781XZ + 109Z^ : 80X^ + 865XZ + 17Z^ : 996X^ + 945XZ + 636Z^); 

substituting its defining polynomials into C, we find that 5^ has a model 

3^:Y^ = IISX^Z + 183X*Z^ + 613X3 Z^ + 35X2 Z^ ^ 174XZ^ + 474Z6. 

In fact, this is the quadratic twist of the true 3^: explicit calculation shows that its Weil 
polynomial is P(-T). 
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